conc

Concurrent Login Prevention Command

Implement concurrent login prevention in ABP Framework. When a user logs in from a new device/browser, all previous sessions are automatically invalidated.

Arguments: $ARGUMENTS

Pre-flight

Project: !basename $(pwd) AuthServer: !find api/src -maxdepth 1 -type d -name "*AuthServer" -o -name "*IdentityServer" 2>/dev/null | head -1 HttpApi.Host: !find api/src -maxdepth 1 -type d -name "*HttpApi.Host" 2>/dev/null | head -1 Domain: !find api/src -maxdepth 1 -type d -name "*.Domain" ! -name "*Shared" 2>/dev/null | head -1 EntityFrameworkCore: !find api/src -maxdepth 1 -type d -name "*EntityFrameworkCore" 2>/dev/null | head -1

Required context:

• Read CLAUDE.md for project conventions
• Read docs/architecture/README.md for project structure

Overview

This command implements concurrent login prevention by:

• Generating unique tokens on each login
• Storing tokens in user entity extra properties
• Adding tokens to user claims
• Validating tokens on every request
• Invalidating sessions when token mismatch detected

How It Works

┌─────────┐     ┌─────────────┐     ┌──────────────┐
│ Login   │ →   │ Generate    │ →   │ Store Token  │
│ Request │     │ New Token   │     │ in Database  │
└─────────┘     └─────────────┘     └──────────────┘
                                             ↓
┌─────────────┐     ┌──────────────┐     ┌──────────────┐
│ Invalidate  │ ←   │ Token        │ ←   │ Add Token to │
│ Old Session │     │ Mismatch?    │     │ Claims       │
└─────────────┘     └──────────────┘     └──────────────┘

Workflow

┌──────────────┐   ┌──────────────┐   ┌──────────────┐   ┌──────────────┐
│ 1. Create    │ → │ 2. Create    │ → │ 3. Configure │ → │ 4. Configure │
│    Domain    │   │    OpenIddict│   │    AuthServer│   │    API Host  │
└──────────────┘   └──────────────┘   └──────────────┘   └──────────────┘

Execution

1. Verify Project Structure

# Find required projects
DOMAIN=$(find api/src -maxdepth 1 -type d -name "*.Domain" ! -name "*Shared" 2>/dev/null | head -1)
EF_CORE=$(find api/src -maxdepth 1 -type d -name "*EntityFrameworkCore" 2>/dev/null | head -1)
AUTH_SERVER=$(find api/src -maxdepth 1 -type d -name "*AuthServer" -o -name "*IdentityServer" 2>/dev/null | head -1)
API_HOST=$(find api/src -maxdepth 1 -type d -name "*HttpApi.Host" 2>/dev/null | head -1)

# Verify all projects exist
if [ -z "$DOMAIN" ] || [ -z "$EF_CORE" ] || [ -z "$AUTH_SERVER" ] || [ -z "$API_HOST" ]; then
  echo "❌ ERROR: Required projects not found"
  echo "Domain: $DOMAIN"
  echo "EF Core: $EF_CORE"
  echo "AuthServer: $AUTH_SERVER"
  echo "API Host: $API_HOST"
  exit 1
fi

echo "✓ Found all required projects"